Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
34c481bd by Salvatore Bonaccorso at 2026-09-29T11:02:33+02:00
Add new batch of pyjwt issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -89,27 +89,49 @@ CVE-2026-102277 (The brace-expansion library generates
arbitrary strings contain
CVE-2026-102276 (The brace-expansion library generates arbitrary strings
containing a c ...)
TODO: check
CVE-2026-102275 (PyJWT is a Python implementation of JSON Web Token standards.
From 2.1 ...)
- TODO: check
+ - pyjwt 2.15.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-x33g-cr3x-6449
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/3cd9ceec33ced359decbad75b413ad668ae6332c
(2.15.0)
CVE-2026-102274 (PyJWT is a Python implementation of JSON Web Token standards.
From 2.9 ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w6j9-cwv2-h6wq
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf
(2.14.0)
CVE-2026-102273 (PyJWT is a Python implementation of JSON Web Token standards.
From 2.1 ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95
(2.14.0)
CVE-2026-102272 (PyJWT is a Python implementation of JSON Web Token standards.
From 2.1 ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291
(2.14.0)
CVE-2026-102271 (PyJWT is a Python implementation of JSON Web Token standards.
From 2.4 ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499
(2.14.0)
CVE-2026-102270 (PyJWT is a Python implementation of JSON Web Token standards.
Prior to ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07
(2.14.0)
CVE-2026-102269 (PyJWT is a Python implementation of JSON Web Token standards.
Prior to ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-hxm8-2xgr-2p9m
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/e6f48401001609a8f99e71fcaf355fb895d508a8
(2.14.0)
CVE-2026-102268 (PyJWT is a Python implementation of JSON Web Token standards.
Prior to ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07
(2.14.0)
CVE-2026-102267 (PyJWT is a Python implementation of JSON Web Token standards.
Prior to ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56
(2.14.0)
CVE-2026-102266 (PyJWT is a Python implementation of JSON Web Token standards.
From 2.1 ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9j54-fg26-wv3r
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/f91ed44dd65baaf457f4b3353ed35e98a753934c
(2.14.0)
CVE-2026-102265 (PyJWT is a Python implementation of JSON Web Token standards.
From 2.1 ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-8wjv-2p76-3863
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/06573692ebcdec8831c3927513b3e87c31fbbb62
(2.14.0)
CVE-2026-102264 (A vulnerability was found in mwasikz robo-cafe-rms up to
228c44a02823f ...)
TODO: check
CVE-2026-102263 (A vulnerability has been found in mwasikz robo-cafe-rms up to
228c44a0 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34c481bd276b6f05b70231896a3ad8197bd003f2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34c481bd276b6f05b70231896a3ad8197bd003f2
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
